Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/febc96bb-2706-3a21-bbb4-0558e5ed511a.roa
File:                     febc96bb-2706-3a21-bbb4-0558e5ed511a.roa (raw, json)
Hash identifier:          11fwV6fJmG/YQhFOU14S6g0eE16wF3Cj/iKpeOClIDE=
Subject key identifier:   45:EE:6D:88:B1:37:32:22:2C:68:A8:32:99:F6:CC:3B:6F:7B:F7:09
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EC326C5B944A2100AFC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/febc96bb-2706-3a21-bbb4-0558e5ed511a.roa
Signing time:             Mon 07 Apr 2025 16:33:12 +0000
ROA not before:           Mon 07 Apr 2025 16:33:12 +0000
ROA not after:            Sun 06 Jul 2025 16:33:12 +0000
asID:                     81
IP address blocks:        152.26.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ec:32:6c:5b:94:4a:21:00:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:12 2025 GMT
            Not After : Jul  6 16:33:12 2025 GMT
        Subject: CN=3c528e86-e38f-4638-82bd-9dc13a261ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:65:10:8a:aa:69:90:d0:e7:d1:8a:43:d1:38:
                    c5:d8:72:a9:12:76:6d:88:5a:d7:cf:ab:fe:14:2f:
                    90:98:b0:13:96:60:5b:33:4e:b6:e0:44:a8:b0:55:
                    a3:36:ea:ae:75:d2:f2:64:2b:10:54:fe:d6:eb:57:
                    c1:ca:6d:26:14:4c:e6:9f:2f:61:8f:e3:62:c9:3b:
                    79:71:16:eb:34:44:dd:03:72:26:3c:43:99:ee:78:
                    30:98:51:f4:87:cd:e9:18:f8:f6:e2:d6:af:c2:0b:
                    b2:ab:4a:b3:e5:c1:7a:68:58:9d:f0:1e:4f:f2:20:
                    1d:ff:02:40:84:7e:08:41:5a:e8:eb:00:d8:9c:8d:
                    c3:01:81:40:89:b3:ce:97:90:cf:93:d8:9f:96:fb:
                    40:85:91:e8:e8:24:a8:04:5c:bb:92:79:42:e2:c3:
                    d6:1f:81:36:ef:ce:32:f4:83:51:69:7c:a6:87:8c:
                    64:28:e5:ac:c7:e1:84:02:63:9b:e7:bb:e0:1b:c1:
                    6a:20:5e:79:79:af:7c:5b:ed:b4:39:32:20:4d:c1:
                    36:59:c2:9a:d1:20:8e:79:49:eb:7a:4f:d9:79:c7:
                    ba:e5:80:9d:d1:80:bb:7d:05:13:b1:d9:45:fa:d5:
                    5a:3c:1c:d1:cf:fd:bb:15:ac:23:7f:fc:67:78:39:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EE:6D:88:B1:37:32:22:2C:68:A8:32:99:F6:CC:3B:6F:7B:F7:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/febc96bb-2706-3a21-bbb4-0558e5ed511a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:95:5c:af:07:8c:03:38:fb:b2:97:be:a6:b4:cc:f4:1b:ea:
         79:a3:e7:45:ec:bb:8c:c9:48:af:8e:07:98:d7:99:3b:e9:2c:
         51:b1:14:e4:4b:43:2c:c2:0e:2a:1e:07:a2:36:bb:ca:7e:ee:
         b4:a4:42:c1:6e:c8:ad:bc:62:5f:15:8d:8c:76:70:8f:63:bd:
         83:8c:db:38:a0:47:e4:e1:56:20:87:6c:47:94:00:b8:98:ee:
         bf:bd:fe:5b:e1:16:30:02:be:e0:5e:26:a1:df:d9:26:c1:85:
         a3:6b:80:26:24:32:7a:ec:c9:ba:5c:d8:d3:4c:41:4c:a9:40:
         c9:26:88:d1:3d:d4:1c:f3:f3:79:22:be:40:9e:63:7e:41:eb:
         e9:4e:14:4a:22:53:44:7f:0a:fb:8d:d2:9e:9e:69:55:49:c7:
         9e:8c:be:68:cc:33:05:46:e4:1a:b7:6a:04:74:a4:75:b7:c5:
         f2:65:c5:6c:bd:fc:69:90:85:3e:65:ea:60:f8:57:fd:c3:d1:
         c1:50:13:50:d0:a5:8c:ee:de:d8:30:e6:38:e2:7d:78:ab:f1:
         fd:93:8b:10:ef:3f:96:d5:d4:b4:05:03:65:50:9b:f7:eb:77:
         f5:e0:79:45:6c:42:f0:ce:85:22:1b:19:05:1c:73:61:a7:31:
         f4:ac:23:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4uwybFuUSiEAr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDQwNzE2MzMxMloXDTI1MDcwNjE2MzMxMlowLzEtMCsGA1UEAxMk
M2M1MjhlODYtZTM4Zi00NjM4LTgyYmQtOWRjMTNhMjYxZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWUQiqppkNDn0YpD0TjF2HKpEnZtiFrXz6v+
FC+QmLATlmBbM0624ESosFWjNuquddLyZCsQVP7W61fBym0mFEzmny9hj+NiyTt5
cRbrNETdA3ImPEOZ7ngwmFH0h83pGPj24tavwguyq0qz5cF6aFid8B5P8iAd/wJA
hH4IQVro6wDYnI3DAYFAibPOl5DPk9iflvtAhZHo6CSoBFy7knlC4sPWH4E2784y
9INRaXymh4xkKOWsx+GEAmOb57vgG8FqIF55ea98W+20OTIgTcE2WcKa0SCOeUnr
ek/Zece65YCd0YC7fQUTsdlF+tVaPBzRz/27Fawjf/xneDkylwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEXubYixNzIiLGioMpn2zDtve/cJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZmViYzk2YmItMjcwNi0z
YTIxLWJiYjQtMDU1OGU1ZWQ1MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBrIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABiVXK8HjAM4+7KXvqa0zPQb6nmj50Xsu4zJSK+OB5jXmTvpLFGxFORL
QyzCDioeB6I2u8p+7rSkQsFuyK28Yl8VjYx2cI9jvYOM2zigR+ThViCHbEeUALiY
7r+9/lvhFjACvuBeJqHf2SbBhaNrgCYkMnrsybpc2NNMQUypQMkmiNE91Bzz83ki
vkCeY35B6+lOFEoiU0R/CvuN0p6eaVVJx56MvmjMMwVG5Bq3agR0pHW3xfJlxWy9
/GmQhT5l6mD4V/3D0cFQE1DQpYzu3tgw5jjifXir8f2TixDvP5bV1LQFA2VQm/fr
d/XgeUVsQvDOhSIbGQUcc2GnMfSsI4k=
-----END CERTIFICATE-----
Generated at Sat May 10 16:51:34 2025 by rpki-client